Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Mozilla — Vulnerabilities & Security Advisories 2268

Browse all 2268 CVE security advisories affecting Mozilla. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Mozilla operates as a non-profit organization primarily known for developing the Firefox web browser and maintaining the Gecko rendering engine. Its software portfolio serves millions of users globally, focusing on open-source web technologies and privacy-centric browsing solutions. Historically, the codebase has been susceptible to a wide array of vulnerabilities, including remote code execution, cross-site scripting, and memory corruption issues such as buffer overflows. These flaws often stem from complex JavaScript engines and network stack implementations. While Mozilla maintains a robust security response team and regularly issues patches, the sheer volume of recorded Common Vulnerabilities and Exposures highlights the challenges inherent in maintaining large-scale, cross-platform applications. The organization continues to prioritize security audits and community-driven bug bounty programs to mitigate risks associated with its extensive feature set and widespread adoption.

Found 1682 results / 2268 Clear Filters
CVE ID Title CVSS Severity Published
CVE-2026-109783 Mitigation bypass in the File Handling component — Firefox - - 2026-10-13
CVE-2026-109781 Denial-of-service in the Printing: Output component — Firefox - - 2026-10-13
CVE-2026-109780 Mitigation bypass in the DOM: Core & HTML component — Firefox - - 2026-10-13
CVE-2026-109782 Mitigation bypass in the File Handling component — Firefox - - 2026-10-13
CVE-2026-109778 Privilege escalation in the WebExtensions component — Firefox - - 2026-10-13
CVE-2026-109776 Race condition in the XPCOM component — Firefox - - 2026-10-13
CVE-2026-109775 Denial-of-service in the WebRTC component — Firefox - - 2026-10-13
CVE-2026-109777 Information disclosure in the Storage: IndexedDB component — Firefox - - 2026-10-13
CVE-2026-109779 Race condition in the Networking: DNS component — Firefox - - 2026-10-13
CVE-2026-109773 Denial-of-service in the Sync component — Firefox - - 2026-10-13
CVE-2026-109771 Information disclosure in the WebRTC: Networking component — Firefox - - 2026-10-13
CVE-2026-109770 Spoofing issue in the DOM: Web Serial component — Firefox - - 2026-10-13
CVE-2026-109772 Same-origin policy bypass in the DevTools component — Firefox - - 2026-10-13
CVE-2026-109774 Invalid pointer, undefined behavior in the DOM: Notifications component — Firefox - - 2026-10-13
CVE-2026-109769 Information disclosure in the Networking: Cache component — Firefox - - 2026-10-13
CVE-2026-109766 Mitigation bypass in the Enterprise Policies component — Firefox - - 2026-10-13
CVE-2026-109767 Information disclosure in the Networking component — Firefox - - 2026-10-13
CVE-2026-109768 Denial-of-service in the Site Reports component — Firefox - - 2026-10-13
CVE-2026-109764 Mitigation bypass in the Enterprise Policies component — Firefox - - 2026-10-13
CVE-2026-109765 Race condition, use-after-free in the Graphics: Text component — Firefox - - 2026-10-13
CVE-2026-109763 Mitigation bypass in the File Handling component — Firefox - - 2026-10-13
CVE-2026-109762 Incorrect boundary conditions in the SVG component — Firefox - - 2026-10-13
CVE-2026-109757 Sandbox escape due to race condition in the Networking component — Firefox - - 2026-10-13
CVE-2026-109760 Mitigation bypass in the Networking: HTTP component — Firefox - - 2026-10-13
CVE-2026-109759 Site isolation issue in the Networking component — Firefox - - 2026-10-13
CVE-2026-109761 Use-after-free in the JavaScript: WebAssembly component — Firefox - - 2026-10-13
CVE-2026-109756 Privilege escalation in the DOM: Navigation component — Firefox - - 2026-10-13
CVE-2026-109754 Incorrect boundary conditions in the DOM: Editor component — Firefox - - 2026-10-13
CVE-2026-109755 Sandbox escape in the DOM: Content Processes component — Firefox - - 2026-10-13
CVE-2026-109752 Use-after-free in the DOM: Workers component — Firefox - - 2026-10-13

This page lists every published CVE security advisory associated with Mozilla. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.